Data Subject Rights, Requests, and Notification CDPSE Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   Which method is commonly used to verify the identity of a data subject making a request?

   • AAsking for their social media password
   • BAccepting any email as proof of identity
   • CRequesting a copy of their government-issued ID
   • DRequiring a notarized letter for every request
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A privacy team receives a data erasure request from a user. The team verifies the user's identity and confirms the request is valid. However, the data is stored in a legacy CRM system that is no longer actively supported. The IT team estimates it will take 45 days to locate and delete the data. What is the most appropriate action?

   • AImmediately delete the data from the active database and ignore the legacy system.
   • BDeny the request because the system is legacy and the data cannot be easily accessed.
   • CInform the user that the request will take longer than the standard timeframe and provide a justification for the delay.
   • DAsk the user to resubmit the request in writing to allow more time for processing.
   Reveal Solution Discussion Select an answer first